CVE-2026-1216839.4Critical
CVE-2026-121683: Ivanti Cloud Services Application vulnerability
Ivanti · Cloud Services Application
Vendor fix available · Affected: Ivanti Cloud Services Application · Exploitation: not established
ExploitationNot established
Not in CISA KEV as of catalogue 2026.11.10 (10 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not establishedNothing in the sources we check
No EPSS score yet. The score appears once FIRST publishes it.
9.4CriticalCVSS
LowMediumHighCrit.
DescriptionNVD
Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete arbitrary trusted EPM Core certificate entries.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 10 Nov.
- Ivanti fixes critical SQL injection and certificate flawsSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.